ComplianceAsCode / ComplianceAsCode/content

CIS 1.3.1 Ensure AIDE is installed

Open
#11,929 5 comments 1 reaction 0 assignees View on GitHub
Debian triaged Ubuntu
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

Check for rule `xccdf_org.ssgproject.content_rule_aide_build_database` fails on Ubuntu 22.04.

#### SCAP Security Guide Version:

master branch

#### Operating System Version:

Ubuntu 22.04 LTS

#### Steps to Reproduce:

1. Install AIDE: `apt install aide aide-common`
2. Initialize AIDE: `aideinit && mv /var/lib/aide/aide.db.new /var/lib/aide/aide.db`
3. Run SCAP: `oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cis_level2_server --rule xccdf_org.ssgproject.content_rule_aide_build_database ssg-ubuntu2204-ds.xml`

#### Actual Results:

```
Title Build and Test AIDE Database
Rule xccdf_org.ssgproject.content_rule_aide_build_database
Result fail
```

#### Expected Results:

```
Title Build and Test AIDE Database
Rule xccdf_org.ssgproject.content_rule_aide_build_database
Result pass
```

#### Additional Information/Debugging Steps:

On Ubuntu 22.04 database definition keyword in the `/etc/aide/aide.conf` file was changed from `database=file:/var/lib/aide/aide.db` to `database_in=file:/var/lib/aide/aide.db`.

Adding `database=file:/var/lib/aide/aide.db` in the `/etc/aide/aide.conf` as workaround gives this warning:

```
WARNING: /etc/aide/aide.conf:194: Using 'database' is DEPRECATED. Update your config and use 'database_in' instead (line: 'database=file:/var/lib/aide/aide.db')
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.